PURPOSE OF WORK
The OT Network Engineer is responsible for the secure, reliable, and continuous operation of the refinery's Plant Automation Network (PAN) and associated Operational Technology (OT) cybersecurity controls.
The role ensures availability, integrity, and security of OT networks supporting process control, safety systems, and plant operations, in compliance with applicable industry standards, corporate cybersecurity requirements, and audit obligations.
The position plays a critical role in protecting refinery operations from cyber threats, ensuring uninterrupted production, plant safety, and regulatory compliance.
REGULAR ASSIGNED DUTIES
1. OT PAN Administration & Network Management
- Administer, operate, and maintain the OT Plant Automation Network, including industrial switches, firewalls, and communication infrastructure supporting DCS, PLCs, SCADA, and SIS.
- Ensure high availability, performance, and reliability of OT networks supporting 24/7 plant operations.
- Maintain secure network segmentation and controlled connectivity between OT and external systems.
2. OT Identity & Access Management
- Administer user and service accounts for OT systems, including creation, modification, deletion, and periodic access review.
- Enforce password control, privilege management, and segregation of duties within OT environments.
- Perform regular verification to ensure compliance with OT cybersecurity access policies.
3. OT Cybersecurity Controls Implementation
- Implement and maintain OT cybersecurity controls including:
- Logging and monitoring
- Antivirus and endpoint protection
- Vulnerability and threat management
- Baseline configuration control and verification
- Ensure cybersecurity controls are applied without compromising plant safety or operational continuity.
4. Patch, Antivirus, and Vulnerability Management
- Plan and execute scheduled OT antivirus updates and patching activities, coordinating with operations to minimize production impact.
- Assess and manage vulnerabilities for new and existing OT assets.
5. Risk Assessment, Inventory & Licensing
- Conduct OT cybersecurity risk assessments for new and existing systems.
- Maintain accurate OT asset inventory and licensing records.
- Support lifecycle management of OT cybersecurity tools and systems.
6. Audit, Compliance & Assurance
- Support internal and external OT cybersecurity assessments and audits.
- Develop, implement, and track audit resolution and corrective action plans.
- Ensure compliance with applicable standards (e.g., ISA/IEC 62443), corporate policies, and regulatory requirements.
7. Incident Response & Emergency Support
- Provide OT cybersecurity emergency call-out support as per approved on-call schedules.
- Support investigation, containment, and recovery from OT cybersecurity incidents.
- Participate in cybersecurity drills, penetration testing support, and response exercises.
8. Firewall & Network Security Management
- Manage and control OT firewalls, network access rules, and secure remote connectivity.
- Monitor network traffic to detect anomalies and potential cybersecurity threats.
EDUCATION:
Bachelor's degree in engineering (Automation, Electrical, Instrumentation, Computer, or related discipline) or equivalent industrial experience in OT / process control environments.
EXPERIENCE/SPECIALIZED KNOWLEDGE:
- Strong understanding of process control systems, industrial automation, and OT networks.
- Working knowledge of OT cybersecurity principles, including access control, network segmentation, vulnerability management, and incident response.
- Familiarity with industrial cybersecurity standards (e.g., ISA/IEC 62443).
- Understanding of refinery operations, safety culture, and change management requirements.
- Minimum 7–10 years experience in: Process control systems / Industrial automation / OT networking / OT cybersecurity / PAN administration
- Prior experience in refinery, petrochemical, power, or heavy industrial environments is required.
Additional Information:
Department: Technical
Nationality: Saudi Only
Location: Yanbu, Saudi Arabia
Type of employment: Direct Hire (Full time Employment)
Post Announcement Period: 15/04/2026 to 30/04/2026
